Your privacy matters to us. This Privacy Policy explains how Casa da Eira collects, uses, shares and protects your personal data when you visit our website (casadaeiracaramulo.pt), make a booking or use our local accommodation services.
Your data is processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and applicable Portuguese law.
Data controller
The controller of your personal data is Manuel Fernandes Dias (“Casa da Eira”), tax number 192182552, with tax domicile at Albitelhe, Calçada da Póvoa, Travessa do Cabeço n.º 9, 3670-054 Campia, Portugal.
For any question relating to data protection, you can contact us at:
What data we collect
Data you provide directly
- Name, email address and phone number;
- Desired stay dates and property of interest;
- The content of messages sent through the contact form, the chat concierge or by email;
- Data required for guest registration and check-in: full name, date of birth, nationality, country of residence, type and number of your ID document or passport and its issue and expiry dates;
- Billing data (name, tax number and address) when you request an invoice.
Data collected automatically
- IP address, device type and browser;
- Pages visited, interactions and website usage data;
- Information collected through cookies and similar technologies (see the “Cookies” section).
We do not collect or store payment card data. Payments by bank transfer or MB WAY are processed by the relevant institution; bookings made through platforms (Booking.com, Airbnb) are processed by those platforms in accordance with their own privacy policies.
Purposes and legal bases
We process your personal data for the following purposes and on the following legal bases:
- Managing bookings, enquiries and the provision of the accommodation service — performance of a contract (Art. 6(1)(b) GDPR);
- Complying with the mandatory registration of guests with the competent authorities (SEF/AIMA, via SIBA) and with invoicing and other tax and accounting obligations — compliance with a legal obligation (Art. 6(1)(c));
- Responding to enquiries and communicating with you about your stay — performance of a contract and/or legitimate interest (Art. 6(1)(b) and (f));
- Analysing and improving the use of the website through analytics cookies — based on your consent or our legitimate interest (Art. 6(1)(a) and (f));
- Ensuring the security of the website and preventing fraud — legitimate interest (Art. 6(1)(f)).
Cookies and similar technologies
Our website uses cookies that are essential to its operation, as well as analytics cookies (Google Analytics) that help us understand, in aggregate, how visitors use the site.
You can object to analytics collection and manage or delete cookies at any time through your browser settings, or by installing the Google Analytics opt-out add-on. Disabling essential cookies may affect how the site works.
Who we share your data with
We do not sell your personal data. We may share it with the following categories of recipients and processors, only to the extent necessary:
- Booking platforms (Booking.com, Airbnb), when you book through them;
- Booking management system / channel manager (Beds24), for availability and reservation synchronisation;
- Invoicing software (Moloni), to issue invoices and comply with tax obligations;
- Web hosting, storage and email providers that support the operation of the website and our communication with you;
- Analytics tools (Google Analytics);
- Competent public authorities, where there is a legal obligation — in particular the registration of guests with SEF/AIMA (SIBA) and the Tax Authority.
International transfers
Some of our service providers (for example, analytics or infrastructure providers) may process data outside the European Economic Area. In such cases, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions.
How long we keep your data
- Booking and guest data: for the duration of the contractual relationship and for the legal periods applicable to guest registration;
- Billing and accounting data: 10 years, as required by Portuguese tax law;
- Enquiries and communications: for as long as needed to respond and, where applicable, for the duration of the customer relationship;
- Analytics and cookie data: for the periods defined for each cookie.
Once these periods elapse, the data is deleted or anonymised.
Data security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure, including restricted access to information and the use of secure connections (HTTPS).
Your rights
As a data subject, you have the following rights:
- Access to your personal data;
- Rectification of inaccurate or incomplete data;
- Erasure of data (the “right to be forgotten”);
- Restriction of processing;
- Data portability;
- Objection to processing;
- Withdrawal of consent at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD — www.cnpd.pt).
Minors
Our services are intended for adults. Data relating to minors is only processed as part of a booking made by a responsible adult.
Changes to this Policy
We may update this Privacy Policy from time to time. The version in force is always available on this page, with the date of the last update.
Contact
For any question about this Policy or about the processing of your personal data, contact us: